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Specification 



1. Title of the Invention : IC CARD 

2 . Claims 

1. An IC card, characterized by the fact that in an IC 
card that has a processor, a nonvolatile memory for storing 
programs of the processor, and a volatile memory which stores 
data and is not backed up by an internal power source or a memory 
which can be volatilized and exchanges data with an external 
device, it is equipped with a detection means that detects a 
stored information showing the storage of an issue processing 
program for an issue processing among the information being sent 
from the above-mentioned external device, a program writing means 
that stores the information of the above-mentioned issue 
processing program sent in accordance with the detection of the 
above-mentioned stored information by the detection means into 
the above-mentioned volatile memory or the above-mentioned memory 
which can be volatilized, and a program implementation means that 
implements an issue processing by starting the above-mentioned 
issue processing program; and after the issue progressing program 
is implemented by the above-mentioned program implementation 
means and the issue processing is finished, the above-mentioned 
issue processing program is erased. 

Numbers in the margin indicate pagination in the foreign text. 



2. The IC card testing system of Claim 1, characterized by 
the fact that the memory which can volatile data is an EEPROM; 
and the program implementation means erases the issue processing 
program after finishing the issue processing. 

3. The IC card testing system of Claim 1, characterized by 
the fact that the memory which can volatilize data is a RAM; and 
the program implementation means cuts off the power supply from 
the above-mentioned external device by discharging the IC card 
from the external device after finishing the issue processing and 
erases the issue processing program. 

3 - Detailed explanation of the invention 

(Industrial application field) 

The present invention pertains to an IC card. Specifically, 
the present invention pertains to an improvement of an IC card 
that does not leave an issue processing program in the IC card. 

(Prior art) 

Credit systems in product transactions, or bank 
payment/deposit systems for exchanging cashes, or various kinds 
of exact calculation systems in hospitals or employee restaurants /2 
are put into practice as systems using IC cards. In these 
systems using the IC cards, however in the systems using the IC 
cards, its illegal use causes a big program. 

The IC card is usually built with microprocessor, memory, 
and interface for exchanging data with external devices. For 
example, it is mounted in a host computer or an IC card 
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reader/writer as one of the external devices, and a command group 
transmitted from the external device is decoded, and in 
accordance with the operation programs stored in the memory, the 
access of the memory such as writing, reading, and erasing of 
data is implemented. The result is sent back as a response to 
the corrunand to the external storage device, and in this sequence, 
the data are exchanged with the external device . 

In such a conventional IC card, data contents such as 
password number, other identification information, various kinds 
of control information for internal and external devices of the 
IC card, and information showing the positions of the storage 
areas of various kinds of data and its capacities are written as 
issue data via an external device by an IC card issuer when the 
card is issued after manufacturing the IC card. For this reason, 
it is necessary to store an issue processing program for writing 
issue data into a prescribed memory area in the IC card. 
(Problems to be solved by the invention) 

The above-mentioned issue processing program has been 
written and mounted in advance in a mask ROM in a microcomputer 
of the conventional IC card. Accordingly, when the IC card is 
used or operated, the issue progressing program remains in the IC 
card. As a result, data can be read out or written into the IC 
card by the issue processing program. Therefore, there is a risk 
in which the contents (password number, etc.) of the IC card are 
detected or rewritten by others. From such a viewpoint, the 
conventional IC card is deficient for its secrecy and 
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reliability. 

Also, since the issue processing program which is not 
required for using and operating exists in a nonvolatile memory 
in a microcomputer, the storage area of general operation 
programs becomes an area other than that, so that its length is 
also restricted. 

The present invention solves the drawbacks of such a prior 
art, and its purpose is to provide an IC card with excellent 
secrecy and reliability without leaving an issue processing 
program. 

(Means to solve the problems) 

The constitution of the IC card of the present invention for 
achieving such a purpose is characterized by the fact that in an 
IC card that has a processor, a nonvolatile memory for storing 
programs of the processor, and a volatile memory which stores 
data and is not backed up by an internal power source or a memory 
which can be volatilized and exchanges data with an external 
device, it is equipped with a detection means that detects a 
stored information showing the storage of an issue processing 
program for an issue processing among the information being sent 
from the external device, a program writing means that stores the 
information of the issue processing program sent in accordance 
with the detection of the stored information by the detection 
means into the volatile memory or the memory which can be 
volatilized, and a program implementation means that implements 
an issue processing by starting the issue processing program; and 
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after the issue progressing program is implemented by the program 
implementation means and the issue processing is finished, the 
issue processing program is erased. 
(Operation) 

Thus, whether or not the information being transmitted from 
an external device is an issue processing program of the IC card 
is detected by the detection means, and if it is detected, the 
information of the issue processing program is written into the 
volatile memory or the memory, which can be volatilized, by the 
issue processing program writing means. Then, after finishing 
the writing, since the program is implemented by the program 
implementation means, the IC card can be freely issued by an 
issuer. At the same time, after the issue processing, if the 
data for the issue processing program are erased in the memory, 
which can volatilize the data, by the program implementation 
means, for instance, and in the volatile memory, when the IC card 
is discharged from the external device, the issue processing 
program is erased. 

As a result, when the IC card is used or operated, the issue /3 
processing program does not exist in the IC card, and the space 
of the volatile memory or the space of the memory which can 
volatilize data can be utilized as a work area of the operation 
programs, so that the IC card that can sufficiently utilize a 
memory area and has excellent secrecy and reliability can be 
issued. 

(Application example) 
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Next, an application example of the present invention is 
explained in detail referring to the figures. 

Figure 1 is a block diagram showing the internal 
constitution of the IC card showing an application example of the 
present invention. Figure 2 is a flow chart showing an issue 
processing when the IC card is issued. 

In Figure 1, 10 is an IC card that is mounted in an external 
device such as IC card reader/writer or host computer and 
exchanges data with the external device, and 9 is its information 
processing part (microprocessor, MPU) . Then, control programs or 
basic processing programs or operation programs of the MPU 9 are 
stored in a ROM (including mask ROM, PROM, and EEPROM) 3a 
installed in an arithmetic processing part 3. 

In a normal operation, the MPU 9 implements a prescribed 
processing in accordance with the operation programs stored in 
the ROM 3a, data transferred from an external device or readout 
data or result data are temporarily stored in the RAM 4 as a 
volatile memory, and the data are exchanged with the external 
devices such as IC card reader/writer. Also, in this case, there 
is no internal power source, and power sources of RAM 4, etc., 
are provided from the external devices. In other words, the RAM 
4 is not backed up by an internal power source. 

5 is an EEPROM, is accessed by the MPU 9, and has an issue 
data storage area 5a into which issue data such as password 
number, various kinds of identification information, and control 
information required for issuing a card and a storage area 5b 
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that temporarily stores an issue processing program for storing 
the issue data in the issue data storage area 5a. 

Here, the MPU 9 consists of identification means 2, 
arithmetic processing part 3, issue processing program writing 
means 6, issue processing program implementation means 7, and 
issue processing program erasure means 8 as its functional 
blocks. Then, part or all of these constituent elements may be 
realized by circuits as the hardware or may also be realized by 
implementing the corresponding each processing program stored in 
the RAM 4, EEPROM 5, or ROM 3a. Furthermore, they may also be 
realized by the combination of the hardware and the software. 

Next, the above-mentioned constitution as the characteristic 
of the present invention and its operation are mainly explained 
according to the processing flow of Figure 2. 

An input and output device 1 is an interface with an 
external device, and at step (1) of Figure 2, the input and 
output device 1 receives a data block transmitted from the 
external device and transmits it to the identification means 2. 
In the data block, there is a mode identification information 
part for identifying the mode (the kind of processing) being 
processed by itself exists, and at the next step (2), it is 
identified by the identification means 2. 

At step (2), first, the mode identification information in 
the data block is decoded, or its matching is detected, so that 
it is decided and identified whether an issue processing or a 
general operation program is implemented. Also, as a 
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transmission format of the data block, for example, initial start 
code, command code or response code, mode identification 
information, transmission data, and final end code are arranged. 
In the transmission data block from the external device (for 
example, IC card reader/writer), the command code such as write 
and readout is inserted into the second position, and as response 
from the IC card 2, the response code is inserted into the second 
position. 

On the other hand, if it is discriminated by the above- 
mentioned identification and decision at step (2) that the mode 
identification information of the data block being transmitted 
from the external device is an issue processing, furthermore, at 
the next step (3), the identification means 2 decides whether or 
not the IC card 10 has been issued, referring to issue flags 
stored in the identification means 2 or in a specific storage 
area of the EEPROM 5. In this decision, when it is decided that 
the issue has not been finished, the issue processing program 
writing means 6 is started by the identification means 2. 

Then, at the next step (4), the issue processing program 
writing means 6 receives the data existing in the data block 
transmitted from the external device via the identification means 
2 and sequentially writes them into the space part of the storage 
area 5b allocated as an area for storing the issue processing 
program of an address space in the EEPROM 5. 

If the entire writing of the data block transmitted from the 
external device is finished, the issue processing block writing 



means 6 transfers a control right to the arithmetic processing 
part 3 and starts the issue processing program implementation 
means 7 via the arithmetic processing part 3. 

The issue progressing program implementation means 7 starts 
the issue processing program stored in the storage area 5b of the 
EEPROM 5 at step (5) and enters a wait loop for detecting an 
issue data writing command- Then, if the issue data are 
transmitted along with the command from the external device, said 
means receives it and proceeds from step (5) to step (6) . At 
step (6), the issue data such as password number, various kinds 
of identification information, and control information 
transmitted from the external device are written into the storage 
area 5a of the issue data of the EEPROM 5 according to the issue 
processing program. Here, all the data required for the next 
issue processing are written, and if the writing processing is 
normally finished, the response of the issue end is transmitted 
to the external device at the next step (7) . Also, in this case, 
as the response, the above-mentioned written data may be read out 
and transmitted to the external device. In such a processing, 
the external device after receiving the written data can decide 
whether or not the issue data are correctly written. 

Next, the issue processing implementation means 7 starts the 
issue processing program erasure means 8 via the arithmetic 
processing part 3. The issue processing program erasure means 8 
erases the issue processing program at step (8), sets an issue 
flag showing the issue end of the EEPROM 5 at step (9), and 
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finishes the issue. Then, the means is returned to the initial 
state of step (1). In this manner, only for the issue 
processing, the issue processing program is loaded in the IC card 
10 from the external device by the decision processing of step 
(2) . 

On the other hand, when the external device tests the 
contents of the written issue data or when it is decided at step 
(6) that the issue data transmitted from the IC card 10 and the 
data to be actually written into the IC card 10 are different 
from the decision in the external device, the external device 
repeats the issue processing of the IC card in a similar sequence 
from step (1) . 

The IC card is issued in this manner. Here, in the decision 
of the previous step (2), if it is decided that the contents 
shown in the mode identification information do not correspond to 
the issue processing program, the flow proceeds to step (3) a, and 
similarly to the case of the above-mentioned step (3), the 
identification means 2 decides whether or not the issue is 
finished, referring to the issue flag. 

As a result, if it is decided that the IC card has been 
issued, the data block transmitted from the external device is 
transferred to the arithmetic processing part 3. The arithmetic 
processing part 3 decodes the command part of the data block at 
of step (4) a and implements the processing for the command. 
Then, the response information of the result processed at step 
(5) a is transmitted to the external device, and the flow returns 
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to the initial state of step (1) . 

On the other hand, in the decision of the previous step 
(3) a, if it is decided that the issue has not been finished, the 
response of a command error is transmitted as an error processing 
to the external device at step (4)b, and the flow returns to the 
initial state of step (1) . 

If such an issue processing is finished, the IC card 10 is 
then discharged from the external device. If the IC card 10 is 
discharged from the external device, since the IC card 10 does 
not have a backup power source, all the data of the RAM 4 are 
erased. Accordingly, if the above-mentioned issue processing 
program is stored in the address space allocated to the RAM 4, 
the erasure processing of the issue processing program of the 
previous step (8) can be omitted. In other words, if the issue 
processing program is stored in the RAM 4, the issue processing 
program is erased when the IC card 10 is discharged. 

In this manner, the issue processing program is erased along 
with the issue processing end, so that only when the IC card is 
issued by card issuer, etc., the issue processing program exists 
in the IC card. Thereby, when the IC card is used or operated, 
an illegal use of readout, write, etc., of data utilizing the 
issue processing program remaining in the IC card can be 
prevented. 

Also, in this application example, in case part or all of 
each constituent element of the identification means 2, 
arithmetic processing part 3, issue processing program writing 
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means 6, issue processing program implementation means 7, and 
issue processing program erasure means 8 are stored as programs 
in the RAM 4 instead of the EEPROM 5, the programs corresponding 
to these functions are stored in the RAM 4 according to the 
processing program of the ROM 3a prior to the above-mentioned 
processing. 

As explained above, in this application example, the RAM is 
used as a volatile memory, and needless to say, an EEPROM which 
can be volatilized may also be used. Also, the issue processing 
program written in the EEPROM may be erased by starting the issue 
processing program erasure means according to the command from 
the external device. Also, the issue processing program may be 
implemented according to the command from the external device 
apart from its writing. 

In this application example, the identification means 2, 
arithmetic processing part 3, issue processing program writing 
means 6, issue processing program implementation means 7, and 
issue processing program erasure means 8 are explained as 
independent means, however they may also be realized by 
implementing each corresponding processing program by the 
arithmetic processing part 3. 

Also, in this application example, the mode identification 
information is put into the data block, and whether or not the 
issue processing program is stored is identified by the mode 
identification means. However, it may be simply a means that can 
detect it from the transmitted information and is not limited to 
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the mode identification means. 

In this application example, the type in which commands and 
data are inserted into the data block and transmitted is 
mentioned, however needless to say, the commands and the data may 
also be independently transmitted. 
(Effects of the invention) 

As explained above, according to the present invention, 
whether or not the information being transmitted from an external 
device is an issue processing program of an IC card is detected 
by the detection means, and if it is detected, the information of 
the issue processing program is written into the volatile memory 
or the memory- which can be volatilized, by the issue processing 
program writing means. Then, after finishing the writing, since 
the program is implemented by the program implementation means, 
the IC card can be freely issued by an issuer. At the same time, 
after the issue processing, the data for the issue processing 
program are erased in the memory, which can volatilize the data, 
by the program implementation means, and in the volatile memory, 
when the IC card is discharged from the external device, the 
issue processing program is erased. 

As a result, when the IC card is used or operated, the issue 
processing program does not exist in the IC card, and the space 
of the volatile memory or the space of the memory which can 
volatilize data can be utilized as a work area of the operation 
programs. Therefore, the IC card which can sufficiently utilize 
the memory area and has excellent secrecy and reliability can be 
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issued. 

4 . Brief description of the figures 

Figure 1 is a block diagram showing the internal /6 
constitution of the IC card which is an application example of 
the present invention. Figure 2 is a flow chart showing an issue 
processing when the IC card is issued. 

1 Input and output device 

2 Identification means 

3 Processing device 
3a ROM 

4 RAM 

5 EEPROM 

6 Issue processing program writing means 

7 Issue processing program implementation means 

8 Issue processing program erasure means 

9 Information processing part 

10 IC card 
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Figure 1: 

1 Input and output device 

2 Identification means 

3 Processing device 
5a Issue data 

6 Issue processing program writing means 

7 Issue processing program implementation means 

8 Issue processing program erasure means 
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Figure 2: 
A- Start 

(1) Data reception ? 

(2) Issue processing ? 

(3) Issue end ? 

(3) a Issue end ? 

(4) Writing of an issue program into a memory 
(4) a Processing implementation for a command 

(4) b Transmission of a command error response to the outside 

(5) Issue data reception ? 

(6) Issue processing 

(7) Transmission of the processing implementation result to the 
outside 

(8) Erasure o the issue processing program 

(9) Setting an issue flag to the issue end 
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the data concerning the issue processing program is erased, and 
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memory 5b, the issue processing program is erased when the 
card is extracted 

from the external device. Thus, the IC card with high 
confidentiality and 
reliability can be issued. 
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